Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: pYU+s+mqiDeV2SlFnIb+EkQuVSAS411cdhC/nFfwZ3c=
Subject key identifier: C1:70:15:3A:F8:14:80:EA:03:B6:B1:06:D8:E6:84:D2:A1:96:8B:DF
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 0194BC3C4FC06EADF36A0C76555E0B2865A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 018F
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: t7XtTuRTGdt84r4gAfkru2Z3Jb3e3oqjiy5h+0/hQ/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:c0:6e:ad:f3:6a:0c:76:55:5e:0b:28:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=c170153af81480ea03b6b106d8e684d2a1968bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:9f:c7:e6:1b:a3:6e:6b:8d:95:26:b7:08:
7f:e8:27:32:98:34:be:85:c5:92:7b:9a:cb:a3:ea:
4a:69:f4:3a:b7:1f:b6:2e:ab:44:a0:43:f1:6d:b2:
ef:b0:b6:02:89:06:4f:e2:cb:12:70:2a:bc:cc:c1:
90:41:fd:cf:2d:17:b8:4d:94:e2:ec:83:6a:d1:a8:
06:73:aa:4a:64:b4:f8:51:27:d1:4a:f3:79:35:3d:
25:d3:ff:e3:3a:2f:58:d1:9b:03:3b:05:47:47:60:
b1:ab:e3:7c:99:9d:5c:77:13:28:62:cb:46:18:90:
41:23:ef:36:ef:68:e1:56:4c:ac:5d:66:37:70:48:
d4:c4:e9:c9:2c:0b:e5:cc:e9:f1:69:1b:ae:38:00:
3d:ed:df:b0:41:a0:9f:76:0c:84:05:03:9a:58:5a:
7f:3c:b7:2e:aa:17:2b:52:1c:aa:eb:74:f1:f0:46:
e1:9a:ff:83:62:54:03:91:50:d4:83:9d:f9:7e:af:
c2:e6:07:94:e6:8c:93:3c:55:df:52:66:ce:8c:d7:
19:a5:fb:de:b4:b9:00:61:60:dc:86:f0:ac:60:04:
5e:9e:bc:19:81:60:27:37:84:84:5c:8a:7e:3f:f1:
2c:4b:4f:18:30:8c:ad:b5:3a:df:3f:69:ed:66:12:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:15:3A:F8:14:80:EA:03:B6:B1:06:D8:E6:84:D2:A1:96:8B:DF
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:4a:2f:3d:ea:c1:57:c0:09:11:54:7c:0e:2a:43:92:67:
67:4c:c9:9a:0f:1c:0e:fe:ad:0c:8e:d4:e3:ce:53:1c:77:f2:
ae:c3:56:65:33:01:56:39:ec:f2:67:82:23:ea:15:35:ba:22:
1f:85:65:7f:03:e2:89:fd:0d:4f:c1:cb:76:09:e5:12:bc:e3:
06:66:3f:bd:95:87:4f:d1:c1:b8:e7:12:61:72:13:0a:f2:4f:
3c:ec:3f:65:4d:1c:a4:47:cf:56:cd:3e:59:f0:45:96:18:a2:
88:1e:05:cd:30:1d:28:1f:34:79:1c:da:20:8e:05:23:aa:53:
fb:20:7b:2f:69:8f:96:0f:1c:f6:44:b4:40:b5:bb:fe:2d:10:
fc:c8:9c:9d:56:32:ca:8a:ec:7e:9d:4c:5e:94:f1:cd:5b:7e:
79:6b:73:8f:e1:77:1c:6a:46:ba:ff:0d:d2:75:39:f6:78:5e:
46:a0:6d:dc:f9:54:c0:8e:a7:43:9f:ea:96:aa:f3:cb:43:70:
c0:02:c7:52:0f:0e:8e:89:15:0c:5d:98:0d:cf:d8:6c:dc:53:
8a:66:1c:18:2e:e2:8e:6f:45:4a:14:77:fe:e2:65:2a:c9:74:
31:6f:05:29:01:f5:75:4e:f0:5b:ec:80:23:f0:f9:45:a3:27:
7d:69:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client